Moodle Data Privacy Statement
This document is for informational purposes only and does not constitute legal advice.
Introduction
UCD fully respects your right to privacy and actively seeks to preserve the privacy rights of those who share information with the University. Any personal information processed by the University will be treated in accordance with the relevant data protection legislation.
This statement relates to the School of Computer Science, University College Dublin (UCD) virtual learning environment, Moodle, which is an open-source Virtual Learning environment, hosted and supported by the School of Computer Science Technical Team.Legal Basis
The legal basis for processing the personal data which you provide as a student in Moodle is a ‘public task’. It is mandatory for you to engage with your module learning requirements in Moodle, in order for you to complete your educational programme at the School of Computer Science UCD.
Collection and use of personal information
Some data, including personal data, is processed for operational purposes and to manage the educational experience. Information on Moodle activity is collected routinely by the School of Computer Science UCD, in order to provide a virtual learning environment (VLE) for UCD faculty, staff and students. The School of Computer Science UCD does not collect, use or disclose personal information except to carry out its obligations to UCD. As a VLE, Moodle allows faculty and users with instructor privileges to provide learning resources, assignments, quizzes, discussion fora and other learning activities as well as scoring, grading and giving feedback on student performance in those activities. Moodle facilitates student engagement with content and other learning activities such as assignments and quizzes. It collects data on student grades and usage such as date and time of access and IP address. All such data is retained for a period of 24 months from your last log in. This is in order to retain assessed work and outcomes as per the UCD Assessment Code of Practice
Users should be aware that any personally identifying information posted to shared areas of Moodle, such as the discussion boards, chat rooms and virtual classroom recordings, is available for use by others. The School of Computer Science UCD cannot prevent this. Users should not post personal or sensitive information to any part of Moodle or add links to inappropriate or unsuitable content. The School of Computer Science UCD reserves the right to monitor user activity in Moodle, and where necessary to take appropriate action. The School of Computer Science UCD is not responsible for the content of any websites linked from Moodle, or for personal information disclosed by individuals themselves. All use of Moodle and associated services must be in accordance with the UCD Information Technology Services Acceptable Use Policy.
Moodle exchanges data with other systems provided by UCD and third party systems which are integrated into Moodle. Information on Moodle activity may be aggregated with data from these systems in order to review aspects of courses, monitor student engagement and progress, and manage university resources more efficiently. The School of Computer Science UCD may also collect anonymised data on Moodle usage for statistical purposes or administrative functions. In exceptional cases permitted by data protection laws, UCD may disclose data without user consent or notice, for example, if it is required to investigate offences, to prevent injury or damage or to comply with a legal obligation.
This privacy statement applies to the use of Moodle by the staff, students and authorised affiliates of UCD. Any data supplied to Moodle is stored within the European Union (EU) in accordance with the General Data Protection Regulation (GDPR) and processed in accordance with the Data Protection Act 2018.
Cookies
Cookies are small pieces of data placed on your web browser by the web sites you visit. Their use within the EU is governed by the Cookies Directive - Directive 2009/136/EC, which amends Directive 2002/58/EC. It provides that “the storing of information or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information”.
Certain cookies are essential to the proper functioning of UCD systems, for example, cookies enable UCD users to access Moodle through single sign on (SSO) using their UCD Connect Id. The use of these functional cookies does not require consent, as they are necessary for the delivery and security of the service. The use of cookies on UCD systems is described in detail on the UCD cookies page.
Moodle uses cookies for essential functioning, performance monitoring and enhanced functionality as described in detail on the Moodle’s Cookies page. While essential cookies can be blocked in a browser, some parts of Moodle will not then work. These essential cookies do not store any personally identifiable information.
Data Retention
The University will retain your personal data in Moodle for no more than 180 days after you graduate from your programme or the end of your relationship as a student with UCD.
Your Rights
Pursuant to the Data Protection Act 2018 and the General Data Protection Regulation (GDPR) you have the following rights:
● Right to access
● Right to rectification
● Right to erasure if data is incorrect or no longer needed
● Right to limit or restrict how personal data are used
● Right to data portability
● Right to object to processing
● Right not to be subject to automated decisions
Some of these rights are not absolute rights and do not apply in all situations.
If you want to make use of your rights, please contact the Moodle administrator at cstech@ucd.ie. If you have concerns about your rights as a UCD Moodle user, you can contact the UCD DPO by email gdpr@ucd.ie.
If you are not satisfied with UCD’s response or believe we are not processing your personal data in accordance with the law, you have the right to complain to the Irish Data Protection Commission. For more detail see https://www.dataprotection.ie
This statement should not be construed as a contractual undertaking.
The University will review and update this statement as appropriate. Therefore, you should revisit this page from time to time.